To whom it may concern,
the latest changes in lanplus_crypt_impl.c together with the OpenSSL 1.1
changes now leak the allocated cipher context on every call. You should call
EVP_CIPHER_CTX_free(ctx), also I would suggest to call
EVP_CIPHER_CTX_cleanup(ctx) always and not only in the success case (e.g.
move these 2 calls to the end of the function and fall through). 

Best regards,
Holger Liebig

Attachment: smime.p7s
Description: S/MIME cryptographic signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Ipmitool-devel mailing list
Ipmitool-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipmitool-devel

Reply via email to